MCP server

Mitre Cwe

io.github.pipeworx-io/mitre-cwe

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

MITRE CWE API MCP.

From the maker's README MITRE Common Weakness Enumeration (CWE) MCP — software/hardware weakness taxonomy. Wraps the CWE API. Keyless. Source

Website Source

At a glance

Type

MCP server

Publisher

pipeworx.io (verified by the MCP Registry)

Status

Working at last check

Tools

49

Token cost

About 27,303 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http mitre-cwe https://gateway.pipeworx.io/mitre-cwe/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.mitre-cwe]
url = "https://gateway.pipeworx.io/mitre-cwe/mcp"

Gemini CLI

{"mcpServers":{"mitre-cwe":{"httpUrl":"https://gateway.pipeworx.io/mitre-cwe/mcp"}}}

Cursor

{"mcpServers":{"mitre-cwe":{"url":"https://gateway.pipeworx.io/mitre-cwe/mcp"}}}

VS Code

{"servers":{"mitre-cwe":{"type":"http","url":"https://gateway.pipeworx.io/mitre-cwe/mcp"}}}

Antigravity

agy mcp add mitre-cwe https://gateway.pipeworx.io/mitre-cwe/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"mitre-cwe","server_url":"https://gateway.pipeworx.io/mitre-cwe/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"mitre-cwe","server_url":"https://gateway.pipeworx.io/mitre-cwe/mcp"}

Tools

• category ~140 tokens
  "What CWEs fall under [category]" / "list weaknesses in the [X] family" / "memory safety weaknesses" / "input validation weaknesses" — fetch a CWE category record (a thematic grouping of related CWEs like "Memory Safety", "Input Validation", "Cryptographic Issues"). Returns the category description
• children ~128 tokens
  "CWEs derived from / under [N]" / "child weaknesses of [CWE]" / "more specific variants of [X]" — list immediate children of a CWE in the relationship tree. CWE is hierarchical; e.g. children of CWE-119 (memory bounds) include CWE-787 (out-of-bounds write) and CWE-125 (out-of-bounds read).
• descendants ~122 tokens
  "All weaknesses derived from [CWE]" / "full subtree below [N]" / "every variant of [X]" — full transitive descendants (children, grandchildren, …) of a CWE. Use for exhaustive coverage analysis — e.g. "every memory-safety weakness" via descendants of CWE-664/119.
• parents ~107 tokens
  "What's the parent CWE of [N]" / "broader weakness category for [X]" / "where does [CWE] sit in the taxonomy" — list immediate parents of a CWE in the relationship tree. Use to walk up to a more general weakness class.
• relationship ~145 tokens
  "How is [CWE-A] related to [CWE-B]" / "relationship between two weaknesses" — fetch the directional relationship (parent/child/peer/precedes/can-precede) between two specific CWE IDs. Specialty tool; most queries are better served by children / parents / descendants.
• view ~135 tokens
  "Top 25 most dangerous software weaknesses" / "OWASP Top 10 CWE mapping" / "CWE view [N]" — fetch a curated CWE view (a published, opinionated selection of weaknesses). View 1003 = simplified mapping (NVD uses this), view 1387 = Top 25, view 1344 = OWASP Top 10. Returns the view's metadata plus the
• weakness ~223 tokens
  "What is CWE-[N]" / "look up CWE [name]" / "details on [weakness]" / "explain XSS / SQL injection / buffer overflow" / "what kind of security flaw is [X]" — fetch a single MITRE CWE (Common Weakness Enumeration) record with description, examples, mitigations, related attacks, references. Use for sec

Browse

• GitHub tools
• Website monitoring
• GitHub and code hosting
• Databases

Related MCP servers

• Mitre Attck
  MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.
• CVE to MITRE ATT&CK Mapper
  Map CVE descriptions to MITRE ATT&CK techniques
• CVE to MITRE ATT&CK Mapper
  Map CVE descriptions to MITRE ATT&CK techniques
• Tooloracle Dora
  DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.
• Craft Quantities: construction material calculators
  Construction quantities from cited calculators, takeoffs, planners, drawings, cut plans. No prices.
• Bidda Compliance
  10,065 source-verified compliance nodes, 39 pillars, 25 MCP tools (EU AI Act, GDPR, NIST, MITRE).
• Gapup
  271 agent-payable tools: competitive intel, finance, KYC, compliance, ESG. x402 per-call.
• TensorFeed
  AI news, model pricing, service status, and machine-payable premium tools. AFTA-certified.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.pipeworx-io/mitre-cwe.svg)](https://aptlynx.net/servers/io.github.pipeworx-io/mitre-cwe)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents